Lucene search
PRIOn knowledge basePRION:CVE-2017-8291HistoryApr 27, 2017 - 1:59 a.m.
Type confusion
2017-04-2701:59:00
PRIOn knowledge base
www.prio-n.com
8
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a “/OutputFile (%pipe%” substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ghostscript | le | 9.21 |
References
openwall.com/lists/oss-security/2017/04/28/2
www.debian.org/security/2017/dsa-3838
www.securityfocus.com/bid/98476
access.redhat.com/errata/RHSA-2017:1230
bugs.ghostscript.com/show_bug.cgi?id=697808
bugzilla.redhat.com/show_bug.cgi?id=1446063
bugzilla.suse.com/show_bug.cgi?id=1036453
git.ghostscript.com/?p=ghostpdl.git;a=commit;h=04b37bbce174eed24edec7ad5b920eb93db4d47d
security.gentoo.org/glsa/201708-06
www.exploit-db.com/exploits/41955/
Related
redhat
redhat
(RHSA-2017:1230) Important: ghostscript security update
2017-05-12 08:05:57
oraclelinux
oraclelinux
ghostscript security update
2017-05-12 00:00:00
ghostscript security update
2018-12-03 00:00:00
ghostscript security and bug fix update
2017-08-07 00:00:00
archlinux
archlinux
[ASA-201705-3] ghostscript: arbitrary command execution
2017-05-07 00:00:00
cisa_kev
cisa_kev
Artifex Ghostscript Type Confusion Vulnerability
2022-05-24 00:00:00
cvelist
cvelist
CVE-2017-8291
2017-04-27 01:41:00
nessus
nessus
Virtuozzo 6 : ghostscript / ghostscript-devel / ghostscript-doc / etc (VZLSA-2017-1230)
2017-07-13 00:00:00
SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2017:1322-1)
2017-05-18 00:00:00
Oracle Linux 6 / 7 : ghostscript (ELSA-2017-1230)
2017-05-15 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2017-1101)
2020-01-23 00:00:00
CentOS Update for ghostscript CESA-2017:1230 centos7
2017-05-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1322-1)
2021-06-09 00:00:00
suse
suse
Security update for ghostscript-library (important)
2017-05-17 12:09:28
Security update for ghostscript-library (important)
2017-05-03 15:10:11
Security update for ghostscript (important)
2017-05-24 21:13:32
redhatcve
redhatcve
CVE-2017-8291
2017-04-27 08:19:47
ubuntucve
ubuntucve
CVE-2017-8291
2017-04-26 00:00:00
zdt
zdt
Ghostscript 9.21 Type Confusion Arbitrary Command Execution Exploit
2017-05-02 00:00:00
checkpoint_advisories
checkpoint_advisories
Ghostscript Type Confusion Arbitrary Command Execution (CVE-2017-8291)
2017-05-08 00:00:00
osv
osv
ghostscript - security update
2017-05-07 00:00:00
CVE-2017-8291
2017-04-27 01:59:02
ghostscript - security update
2017-04-28 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:16:42
nvd
nvd
CVE-2017-8291
2017-04-27 01:59:02
cve
cve
CVE-2017-8291
2017-04-27 01:59:02
f5
f5
K01362377 : Ghostscript vulnerability CVE-2017-8291
2017-05-08 00:00:00
seebug
seebug
Ghostscript remote code execution (CVE-2017-8291)
(ghostbutt)
2017-04-29 00:00:00
thn
thn
Critical Flaws in Ghostscript Could Leave Many Systems at Risk of Hacking
2018-08-22 08:27:00
North Korea's APT37 Targeting Southern Counterpart with New M2RAT Malware
2023-02-15 14:59:00
attackerkb
attackerkb
CVE-2017-8291
2017-04-27 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in ghostscript affects PowerKVM
2018-06-18 01:36:14
packetstorm
packetstorm
Ghostscript 9.21 Type Confusion Arbitrary Command Execution
2017-05-01 00:00:00
centos
centos
ghostscript security update
2017-05-15 15:59:50
amazon
amazon
Important: ghostscript
2017-06-06 16:51:00
debian
debian
[SECURITY] [DLA 932-1] ghostscript security update
2017-05-07 05:57:50
[SECURITY] [DSA 3838-1] ghostscript security update
2017-04-28 11:51:39
[SECURITY] [DSA 3838-1] ghostscript security update
2017-04-28 11:51:39
hackerone
hackerone
Basecamp: Remote code execution on Basecamp.com
2018-06-13 07:27:51
debiancve
debiancve
CVE-2017-8291
2017-04-27 01:59:02
alpinelinux
alpinelinux
CVE-2017-8291
2017-04-27 01:59:02
metasploit
metasploit
Ghostscript Type Confusion Arbitrary Command Execution
2017-04-28 14:56:52
exploitdb
exploitdb
Ghostscript 9.21 - Type Confusion Arbitrary Command Execution (Metasploit)
2017-05-02 00:00:00
rapid7community
rapid7community
Metasploit Weekly Wrapup
2017-05-05 20:37:48
gentoo
gentoo
GPL Ghostscript: Multiple vulnerabilities
2017-08-21 00:00:00
ubuntu
ubuntu
Ghostscript regression
2017-05-16 00:00:00
Ghostscript vulnerabilities
2017-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: ghostscript-9.20-10.fc26
2017-05-08 14:25:23
[SECURITY] Fedora 25 Update: ghostscript-9.20-9.fc25
2017-05-07 00:03:32
[SECURITY] Fedora 24 Update: ghostscript-9.20-9.fc24
2017-05-15 04:28:05
mageia
mageia
Updated ghostscript packages fix security vulnerability
2017-05-08 01:16:00